Solved

Access denied on some folders, even for administrator

Posted on 2007-11-18
7
2,880 Views
Last Modified: 2008-10-28
Hello,
I have a problem with a install of XP Prof SP2.
On some folders (especially the "all users" profile folder) I cannot view, delete, edit or add any file. I can see the file lists. This is escpecially impractical as windows cannot be validated anymore because of this error: it just returns: "Acces denied"
I've tried:
- Logging in as administrator: no success
- Granting all rights to everyone (via the "Security" tab of the properties option): no success
- Changing the owner: still access denied
- Giving a test user all the priviliges I found and adding him to all of the groups: no success

Does anyone have an idea?
0
Comment
Question by:dtechnology
7 Comments
 
LVL 4

Expert Comment

by:Wolluf
Comment Utility
Has this always been the case since install - or did it start recently after being ok for a while?

When you take ownership of a folder, do you tick the box which replaces owner on all subfolders?

There isn't a 'deny access' permission set against either the Users or Eveyone group? Have you tried removing all security except for your user (just to test - obviously the All Users folder should be accessible to everyone).
0
 
LVL 87

Expert Comment

by:rindi
Comment Utility
Is encryption being used by any chance?
0
 
LVL 8

Expert Comment

by:JSoup
Comment Utility
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/chkdsk.mspx?mfr=true
chkdsk /f

How to Run Check Disk on Windows XP
http://www.isd518.net/District/TechDir/Help/Chkdsk.htm

Note this issue
The CHKDSK utility incorrectly identifies and deletes in-use security descriptors
http://support.microsoft.com/kb/831374

0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Assisted Solution

by:Jameshontishar
Jameshontishar earned 50 total points
Comment Utility
Have you tried taking ownership of the folder using the admin account....

ie right click properties - advanced - take ownership

0
 
LVL 8

Expert Comment

by:JSoup
Comment Utility
Note this issue
The CHKDSK utility incorrectly identifies and deletes in-use security descriptors
http://support.microsoft.com/kb/831374

0
 
LVL 5

Expert Comment

by:Dr-4N
Comment Utility
You can try a utility called unlocker this is free for download from the internet and it adds an option in the context menu allowing you to free the folder form any program locking it.
0
 
LVL 3

Accepted Solution

by:
ruijietan earned 450 total points
Comment Utility
The system account should have access to the files.

This is the procedure for entering that folder as NT AUTHORITY\SYSTEM using a hole in the task scheduler.

Open the run box and type cmd.

When the command prompt pops up, type 'at (systemtime after 1 min) /interactive cmd.exe'

Type the time in the 24 hour format.

For example:

The system time is 13:59.
You would type the following:

at 14:00 /interactive cmd.exe

REMEMBER THE COLEN BETWEEN  14 AND 00! Full stops don't work.

When system time turns to 14:00, a command prompt will come pop up because of the entry you put in the Task Scheduler. That prompt is running under the System Account, and anything you execute there will run as System.

NOTE: Keep the original prompt that is running under YOUR account running if you want to revert to your account without rebooting later on.

Now start Task Manager and end the 'explorer.exe' process.

The desktop and start bar will disappear. This is normal.

Enter: 'explorer.exe' in the prompt which is running with System Priviliges.

Click on the start button. You are now logged in as NT AUTHORITY\SYSTEM.

The system should be able to access those files.

Should you want to revert to your original account without rebooting, just end the explorer.exe process again and type 'explorer.exe' in the prompt running under your account.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now